Toward Polymorphic Backdoor Against Semantic Communication via Intensity-Based Poisoning
Summary
Researchers created SemBugger, a polymorphic backdoor attack (a type of hidden malicious code that can change its behavior) against semantic communication (SC, a system where AI learns shared knowledge to compress and transmit information efficiently). The attack uses variable-intensity triggers to poison training data and manipulate the system into producing different malicious outputs while appearing normal, but the researchers also developed a defense mechanism using controlled noise that can resist these attacks.
Solution / Mitigation
The source proposes a provable robustness defense that resists SemBugger attacks through a controlled noise mechanism, which operates by strategically adding noise to semantic communication inputs, with theoretical lower bounds on defense effectiveness provided. Experiments show this designed defense effectively neutralizes SemBugger attacks.
Classification
Related Issues
Original source: http://ieeexplore.ieee.org/document/11501285
First tracked: May 12, 2026 at 02:01 AM
Classified by LLM (prompt v3) · confidence: 85%